CVE-2025-22117 ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()
A missing bounds check on packet length in the Intel ice driver allows attackers to cause a denial of service via crafted virtual channel messages.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-22117?
CVE-2025-22117 is a high-severity vulnerability in Linux kernel, published on 16 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()
Fix using the untrusted value of proto->raw.pkt_len in function ice_vc_fdir_parse_raw() by verifying if it does not exceed the VIRTCHNL_MAX_SIZE_RAW_PACKET value.
Which versions are affected by CVE-2025-22117?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-22117?
Apply the vendor's patch.
Is CVE-2025-22117 being exploited?
There is no known exploitation of CVE-2025-22117 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-22117, DEBIAN-CVE-2025-22117, GHSA-76xf-w35q-qjmg, ROOT-OS-DEBIAN-13-CVE-2025-22117, UBUNTU-CVE-2025-22117.